Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/3130332e3137392e31332e302f32342d3234203d3e20313439333339.roa
File:                     3130332e3137392e31332e302f32342d3234203d3e20313439333339.roa (raw, json)
Hash identifier:          hj7AxZha/0UMDCCJ1jFrzNiqEoW5ocfthigeLPCS3mE=
Subject key identifier:   F6:B0:BE:78:F8:D0:83:69:BF:E0:17:E8:03:38:9D:1D:D9:A8:9C:A6
Certificate issuer:       /CN=535C0FE8EE7BE7E1C8897B031858C36344038072
Certificate serial:       1066757FCEB8E2B2D0B79B3B321DA7CAB4BD0BF6
Authority key identifier: 53:5C:0F:E8:EE:7B:E7:E1:C8:89:7B:03:18:58:C3:63:44:03:80:72
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535C0FE8EE7BE7E1C8897B031858C36344038072.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/3130332e3137392e31332e302f32342d3234203d3e20313439333339.roa
Signing time:             Thu 11 Sep 2025 02:02:22 +0000
ROA not before:           Thu 11 Sep 2025 01:57:22 +0000
ROA not after:            Thu 10 Sep 2026 02:02:22 +0000
asID:                     149339
IP address blocks:        103.179.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.crl
                          rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535C0FE8EE7BE7E1C8897B031858C36344038072.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 09:03:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:66:75:7f:ce:b8:e2:b2:d0:b7:9b:3b:32:1d:a7:ca:b4:bd:0b:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=535C0FE8EE7BE7E1C8897B031858C36344038072
        Validity
            Not Before: Sep 11 01:57:22 2025 GMT
            Not After : Sep 10 02:02:22 2026 GMT
        Subject: CN=F6B0BE78F8D08369BFE017E803389D1DD9A89CA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:81:cd:8c:fd:df:44:fa:85:18:c1:e3:d9:b4:
                    59:55:4e:27:7b:4f:75:a4:2a:27:74:f7:08:38:ad:
                    f5:ac:88:c9:0b:a3:bf:03:36:59:ea:d3:8e:f1:6b:
                    d6:a2:b2:9a:a7:10:55:d7:b6:e0:6b:9b:26:0a:45:
                    44:5d:d3:f7:2b:54:43:e2:2c:42:2a:92:c7:6c:b9:
                    9f:63:cf:91:62:be:a5:ab:b2:3b:47:c0:be:aa:d4:
                    55:6c:be:44:40:82:42:bf:52:95:67:90:28:48:cb:
                    5d:bf:27:39:68:54:e8:b8:fc:fb:e7:f2:48:79:62:
                    b8:9a:d3:b8:99:e0:70:32:aa:f5:0f:9e:14:28:2f:
                    be:58:0a:77:be:84:d2:fb:59:19:bb:19:27:23:e9:
                    65:93:55:af:b8:09:a6:3a:72:36:f1:ed:7d:b1:84:
                    f7:f1:b5:5f:e4:b1:40:d0:d2:c5:c9:e8:ab:af:63:
                    88:dd:60:b9:20:43:c7:84:8d:03:db:68:22:22:ad:
                    c2:71:6f:a2:33:ce:24:43:e7:f8:3b:a9:27:ca:31:
                    37:56:21:27:ed:cc:44:27:c6:8d:7c:3f:ef:d9:b1:
                    92:8b:a5:16:82:84:1f:df:8c:97:84:f7:8d:f7:9b:
                    ed:8e:3d:bb:06:d9:8f:83:bc:c6:54:3c:c9:7c:e8:
                    61:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B0:BE:78:F8:D0:83:69:BF:E0:17:E8:03:38:9D:1D:D9:A8:9C:A6
            X509v3 Authority Key Identifier:
                keyid:53:5C:0F:E8:EE:7B:E7:E1:C8:89:7B:03:18:58:C3:63:44:03:80:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535C0FE8EE7BE7E1C8897B031858C36344038072.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/3130332e3137392e31332e302f32342d3234203d3e20313439333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:02:2a:76:b1:c5:78:71:6a:63:4c:4c:18:a4:d4:f4:5c:82:
         78:64:94:f0:f8:9c:85:58:5d:bb:5f:60:5b:41:56:5f:e5:d0:
         3c:d7:ee:ea:4e:ca:af:bc:c2:15:ba:c4:82:e2:70:38:4a:91:
         47:62:37:00:4e:48:da:db:e3:e3:a3:e2:44:97:59:4f:af:3f:
         97:8f:40:a3:aa:3f:4f:53:31:40:55:3c:d5:f2:21:25:50:a8:
         1f:85:93:5a:96:64:95:09:65:43:45:b3:de:6d:15:39:50:9d:
         93:89:f2:b3:a1:5c:22:c2:97:4b:ea:89:9f:a1:c7:f0:f1:5c:
         7b:84:ca:47:0e:02:53:a0:06:db:08:ea:30:bb:aa:ef:51:9e:
         76:dd:8d:ad:0a:19:f0:7b:21:16:34:b8:b2:d3:89:57:ab:e5:
         a4:6b:bd:c1:e1:44:63:d4:da:82:e5:8d:64:dd:79:d4:d7:ad:
         93:32:d6:5b:96:3b:61:d7:8a:3f:df:8e:2c:8b:52:cc:bf:76:
         c4:bb:28:61:24:39:7f:16:d8:0e:81:24:f0:89:bd:67:c2:04:
         ec:6c:c2:98:8e:f1:42:90:0b:81:57:e5:2d:b5:17:3b:f1:f6:
         ef:de:a5:18:de:b7:97:12:c1:a6:b8:44:d3:cc:31:0f:26:c8:
         f4:6c:74:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:44:26 2025 by rpki-client